This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: hFOxy2nVn1hM879UlbrakZobixKzkOrZIXI1Wmk/lrY= Subject key identifier: BE:C1:67:32:6B:14:AE:B9:6D:27:19:19:3C:08:56:A2:B2:55:C2:4D Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 01A0 Signing time: Tue 23 Dec 2025 02:22:09 +0000 Manifest this update: Tue 23 Dec 2025 02:22:09 +0000 Manifest next update: Tue 30 Dec 2025 02:22:09 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: IkyNqVs0CQIsMtoW0dwsxqxnluktDdzSYYLv4r0Yoms=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: 4ZzJfaYDIWcwC7QMRrN8yPR83xv8sh7dqWbbzPE3dT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: Dec 23 02:22:09 2025 GMT Not After : Dec 30 02:22:09 2025 GMT Subject: CN=6949fcd1-12a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:7c:0a:b8:49:b4:1a:45:10:8c:2a:ec:7a: 9a:6b:85:38:79:9c:11:9a:54:14:fe:4f:ed:1b:65: cc:be:13:b1:c2:d4:27:43:70:a1:d4:94:f8:d2:68: fb:ee:4b:ce:93:f2:77:8c:c6:75:53:27:c6:58:16: 9a:cd:39:6f:14:c2:c6:de:5f:3c:e4:07:86:ab:3e: b2:bd:ef:3f:33:46:f7:b6:79:03:ad:45:38:39:6f: 80:bc:ee:93:80:0a:0d:75:0d:1c:6a:bc:11:73:df: d9:68:91:4b:c5:33:5d:5d:99:fd:88:d0:3f:b5:25: 78:6e:30:75:cd:71:a6:82:72:1f:f7:5b:8b:6e:f9: 42:60:ff:19:8b:52:1e:5b:c3:0c:03:f4:e2:dc:31: 7a:5d:cd:c7:76:4e:53:e5:c2:ce:2e:ca:5d:16:91: de:66:0b:66:70:5c:8f:47:38:7f:ff:af:72:ef:3d: 9c:bf:52:f8:19:f3:58:b7:ce:a8:7f:b5:56:f7:9b: 03:8e:e6:2d:a2:1b:88:17:92:7d:8d:4c:64:ad:32: 87:f5:bf:96:2a:5b:4a:00:76:67:4a:8d:9c:3f:28: f8:eb:21:e3:c1:94:7d:36:70:1b:0e:b9:29:09:ae: 4e:54:bf:a5:1d:72:cf:f9:5d:1b:70:7f:4c:2d:79: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:67:32:6B:14:AE:B9:6D:27:19:19:3C:08:56:A2:B2:55:C2:4D X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a1:3b:cd:61:89:09:8d:d0:89:ab:48:ed:53:63:eb:7d:5a: d2:9d:84:41:db:87:e3:5f:72:95:a0:fc:89:a0:01:23:36:8a: 78:ea:e2:b1:06:39:23:4f:94:85:1a:30:0d:b9:25:6b:9d:eb: d4:d8:14:aa:10:49:81:ee:bf:17:83:b0:6c:c4:dc:44:c0:c3: f5:cc:70:90:fd:72:e1:5d:76:3b:cc:bd:71:7e:0e:24:2d:f6: f5:8c:de:27:5d:fd:27:4a:2c:15:48:09:a5:1d:0a:97:13:4e: b5:75:1f:71:ff:68:d7:71:f6:3b:cf:f1:ed:10:51:e4:45:00: 3f:e4:3e:3d:65:4d:c3:8c:b1:82:6d:dc:b2:0d:52:e0:7f:3f: 2a:6a:b2:8d:3b:75:7b:9a:b4:aa:aa:f3:c3:ce:69:10:b2:66: cb:2a:7b:7b:a1:8f:3e:78:ca:81:63:7d:de:18:30:22:e3:da: 07:ca:dc:67:6b:19:bd:0e:db:f9:14:e1:41:a0:10:bb:5c:18: 88:30:0b:18:51:44:cd:80:88:6e:78:ec:f0:59:ce:fd:80:9d: 78:76:55:fb:6c:97:35:1b:27:25:0e:c4:06:af:71:5e:67:6e: 65:dc:d7:04:e5:c9:b8:00:f9:71:58:ee:45:cf:bb:57:01:31: fa:2b:e2:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUxMjIzMDIyMjA5WhcNMjUxMjMwMDIyMjA5WjAYMRYwFAYD VQQDDA02OTQ5ZmNkMS0xMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBd8CrhJtBpFEIwq7Hqaa4U4eZwRmlQU/k/tG2XMvhOxwtQnQ3Ch1JT40mj7 7kvOk/J3jMZ1UyfGWBaazTlvFMLG3l885AeGqz6yve8/M0b3tnkDrUU4OW+AvO6T gAoNdQ0carwRc9/ZaJFLxTNdXZn9iNA/tSV4bjB1zXGmgnIf91uLbvlCYP8Zi1Ie W8MMA/Ti3DF6Xc3Hdk5T5cLOLspdFpHeZgtmcFyPRzh//69y7z2cv1L4GfNYt86o f7VW95sDjuYtohuIF5J9jUxkrTKH9b+WKltKAHZnSo2cPyj46yHjwZR9NnAbDrkp Ca5OVL+lHXLP+V0bcH9MLXn2lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7BZzJr FK65bScZGTwIVqKyVcJNMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1oTvNYYkJjdCJq0jtU2PrfVrSnYRB24fjX3KVoPyJoAEjNop46uKx BjkjT5SFGjANuSVrnevU2BSqEEmB7r8Xg7BsxNxEwMP1zHCQ/XLhXXY7zL1xfg4k Lfb1jN4nXf0nSiwVSAmlHQqXE061dR9x/2jXcfY7z/HtEFHkRQA/5D49ZU3DjLGC bdyyDVLgfz8qarKNO3V7mrSqqvPDzmkQsmbLKnt7oY8+eMqBY33eGDAi49oHytxn axm9Dtv5FOFBoBC7XBiIMAsYUUTNgIhueOzwWc79gJ14dlX7bJc1GyclDsQGr3Fe Z25l3NcE5cm4APlxWO5Fz7tXATH6K+IK -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:18 2025 by rpki-client